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COUNTING PHASE 



Step 1 



Randomizer, Jvd, decrypts list 
of cf to yield and 
changes order of list 



Step 2 



Tallier, TM, checks re- 
ordered list of (xiji) : 
any duplicate entries? 



YES Go to A 
► inFig.4 



■MO 



Step 3 



Tallier, TM, checks digital 
signatures yi: 
any invalid ? 



YES p Go to A 



in Fig„4 



IMO 



Step 4 



Tallier, TM, compares 
list, L, of (xi 3 yi) with 
revocation list 2t£, 
any overlap ? 



YES % Go to A 
in Fig.4 



Step 5 





MO 


f ^ 

SXtm used to decrypt x t to 
yield votes, v* 


y 





Step 6 



Tallier, TM, co unts votes 
and publishes the result of 
the voting process 
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DISCREPANCV-TRACING: 
CHEATING MIX-SERVER, Mj 



For each queried pair 

prompt mix-servers, M, 
to generate zero- 
knowledge proofs of 
correctness. 

Satisfactory proofs for all 





MO 

r 


( 1 

Disqualify 3£ for which no 
satisfactory proof 


r 





jv< ' 

decrypted using SX a 
to yield 



Tallier, ¥M, decrypts + 

randomly permutes fayi), 

giving proofs of 
correctness, to yi eld votes, 

Vi 



Tallier, TM, counts 
votes and publishes the 
result of the x/oting 
process 



YES Go to B 



In Fig.5 
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DISCREPANCY-TRACING: 
CHEATING VOTER 



For each queried pair (x if yi) q9 

use back-tracing algorithm 
of mix-net, M, ^with (xiji) q as input, 

to yield Id/ iJy 
of voter w/ho sent to BB 
oij) corresponding to {x h y t ) q 



Apply *RTTVj (signature- 
tracing mechanism of the 

fair blind signature 
scheme) to retrieve (xyjrg) 
corresponding to 



Add {3c iJf yy) to 
revocation list, KL 



Remove (xj ,yj) q from list, 
L, of ballots to be 
counted 



T 



Go to C 
In Fig.3 



